Skip to content
Noroxi

mandrakesoft records

151 published records for vendor mandrakesoft.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
30
With a fix record
42.4%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    151 records
    • CVE-2004-0460
      54Plan

      Buffer overflow in the logging capability for the DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause

      CriticalCVSS 10.0No exploitEPSS 45%

      isc · dhcpdAug 6, 2004

    • CVE-2004-0932
      49Plan

      McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 2004 allows remote attac

      HighCVSS 7.5Proof of conceptEPSS 63%

      ca · etrust antivirusJan 27, 2005

    • CVE-2004-0386
      48Plan

      Buffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote attackers to execute arbitrary code via a l

      CriticalCVSS 10.0Proof of conceptEPSS 26%

      mplayer · mplayerMay 4, 2004

    • CVE-2004-0461
      45Plan

      The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses

      CriticalCVSS 10.0No exploitEPSS 16%

      isc · dhcpdAug 6, 2004

    • CVE-2000-0844
      45Plan

      Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attacke

      CriticalCVSS 10.0Proof of conceptEPSS 15%

      caldera · openlinux ebuilderNov 14, 2000

    • CVE-2002-0083
      43Plan

      Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges.

      CriticalCVSS 9.8Proof of conceptEPSS 14%

      immunix · immunixMar 15, 2002

    • CVE-2003-0434
      42Plan

      Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metach

      HighCVSS 7.5Proof of conceptEPSS 40%

      adobe · acrobatJul 24, 2003

    • CVE-2007-1543
      42Plan

      Stack-based buffer overflow in the accept_att_local function in server/os/connection.c in Network Audio System (NAS) before 1.8a SVN 237 all

      CriticalCVSS 10.0No exploitEPSS 8%

      mandrakesoft · mandrake linuxMar 20, 2007

    • CVE-2004-1187
      42Plan

      Heap-based buffer overflow in the pnm_get_chunk function for xine 0.99.2, and other packages such as MPlayer that use the same code, allows

      CriticalCVSS 10.0No exploitEPSS 5%

      mplayer · mplayerJan 10, 2005

    • CVE-2005-3625
      41Plan

      Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial

      CriticalCVSS 10.0No exploitEPSS 3%

      libextractor · libextractorDec 31, 2005

    • CVE-2003-0041
      41Plan

      Kerberos FTP client allows remote FTP sites to execute arbitrary code via a pipe (|) character in a filename that is retrieved by the client

      CriticalCVSS 10.0No exploitEPSS 3%

      mit · kerberos ftp clientFeb 19, 2003

    • CVE-2001-0388
      41Plan

      time server daemon timed allows remote attackers to cause a denial of service via malformed packets.

      CriticalCVSS 10.0No exploitEPSS 2%

      freebsd · freebsdJun 27, 2001

    • CVE-2000-1042
      41Plan

      Buffer overflow in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root pri

      CriticalCVSS 10.0No exploitEPSS 1%

      mandrakesoft · mandrake linuxDec 11, 2000

    • CVE-2004-1188
      41Plan

      The pnm_get_chunk function in xine 0.99.2 and earlier, and other packages such as MPlayer that use the same code, does not properly verify t

      CriticalCVSS 10.0No exploitEPSS 1%

      mplayer · mplayerJan 10, 2005

    • CVE-2000-1043
      41Plan

      Format string vulnerability in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to g

      CriticalCVSS 10.0No exploitEPSS 1%

      mandrakesoft · mandrake linuxDec 11, 2000

    • CVE-2004-0933
      36Monitor

      Computer Associates (CA) InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure

      HighCVSS 7.5Proof of conceptEPSS 20%

      ca · etrust antivirusJan 27, 2005

    • CVE-2004-1096
      36Monitor

      Archive::Zip Perl module before 1.14, when used by antivirus programs such as amavisd-new, allows remote attackers to bypass antivirus prote

      HighCVSS 7.5Proof of conceptEPSS 18%

      broadcom · brightstor arcserve backupJan 10, 2005

    • CVE-2007-1351
      36Monitor

      Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier all

      HighCVSS 8.5No exploitEPSS 5%

      x.org · libxfontApr 5, 2007

    • CVE-2007-4938
      35Monitor

      Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service (app

      HighCVSS 7.6Proof of conceptEPSS 16%

      ibm · aixSep 18, 2007

    • CVE-2004-0935
      35Monitor

      Eset Anti-Virus before 1.020 (16th September 2004) allows remote attackers to bypass antivirus protection via a compressed file with both lo

      HighCVSS 7.5Proof of conceptEPSS 15%

      archive zip · archive zipJan 27, 2005

    • CVE-2004-0934
      34Monitor

      Kaspersky 3.x to 4.x allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to

      HighCVSS 7.5Proof of conceptEPSS 14%

      ca · etrust antivirusJan 27, 2005

    • CVE-2004-0937
      34Monitor

      Sophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0, allows remote attackers to bypass antivirus

      HighCVSS 7.5Proof of conceptEPSS 14%

      sophos · sophos anti-virusFeb 9, 2005

    • CVE-2004-0936
      34Monitor

      RAV antivirus allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, w

      HighCVSS 7.5Proof of conceptEPSS 14%

      ca · etrust antivirusJan 27, 2005

    • CVE-2001-0136
      33Monitor

      Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE comman

      MediumCVSS 5.0Proof of conceptEPSS 44%

      proftpd · proftpdMar 12, 2001

    • CVE-2004-0803
      32Monitor

      Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer ov

      HighCVSS 7.5No exploitEPSS 8%

      libtiff · libtiffDec 23, 2004